Should SSL always be set up?

Hi all,

I have read other threads about SSL and there are a couple of points on them...

It was said SSL only really needs to be on the checkout pages because that may be where the sensitive information is input and the reason for not including SSL on all the other pages is so the site runs faster and for other SEO reasons.

However, that means when you sign in, you are doing it without ssl which is a risk right? I was under the impression that all eCommerce applications should have ssl on the whole site for a layer of security and also to assure the visitor that their security is important etc.

So what should be standard practice for the use of SSL and what are the steps to secure my site with ssl?

Thanks for your time.

SSL is technically useless on pages that just serve images and text... that being said, you're right that it should be persent on the login page as well.

But Google has also announced that it will give a ranking boost to sites that have SSL site-wide, so it certainly will not do you any harm, if you enable SSL on all pages.

Thanks for your reply.

It also looks like on the nopcommerce showcase pages, quite a few of the showcase sites seem to have https for their whole site.

There's a setting for you to force SSL on all pages. :)

Also, if you want free SSL - try this: https://www.youtube.com/watch?v=ScCO9uZIVv0